sip.gsk.com

- GlaxoSmithKline Services Unlimited -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:19:ee:fe was issued on by Entrust, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

GlaxoSmithKline Services Unlimited

Organization: GlaxoSmithKline Services Unlimited
Organization unit: IT
Locality: Middlesex
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:19:ee:fe
Serial Number (int): 1276767998
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 89:91:85:6a:c0:b0:72:5f:c7:eb:c7:a4:5f:bc:9a:14:d5:d4:09:f3
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 34:32:3e:93:7b:bd:c8:6f:b6:58:16:1e:f4:ca:e7:69:93:ea:14:7a
Fingerprint (sha256): 53:eb:c7:c4:6b:e4:01:ce:05:cc:ae:a6:ab:22:ae:c4:76:ae:60:19:fa:92:68:ba:11:1b:43:0e:9b:c7:25:7c


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate sip.gsk.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.gsk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.gsk.com
sip.maxinutrition.com
sipfed.gskbio.com
sip.gskbio.com
sip.viivhealthcare.com
sipfed.viivhealthcare.com
sipfed.maxinutrition.com
sipfed.gsk.com
sipfed.stiefel.com
sip.stiefel.com

Other certificates including the domain name gsk.com

(limited to 100 certificates)
*.mobileadmin-en-in.gskpro.com
access.gsk.com
gsk.com
tts-eu.inrix.com
*.infanrix.pl
www.gsk.com
*.gdsgsk.com
gskstatic.com
fortherecord.payments.us.gsk.com
cert00041-azurecdn.akamaized.net
pricedisclosure.gsk.com
cert00041-azurecdn.akamaized.net
softlaunch-iis.gskinternet.com
cert00017-azurecdn.akamaized.net
naebxnet.gsk.com
*.voltaren.ee
fenistil.ch
aim-api.gsk.com
rewrites.gskinternet.com
cert00017-azurecdn.akamaized.net
cert00041-azurecdn.akamaized.net
incapsula.com
cert00017-azurecdn.akamaized.net
*.voltaren.ee
*.api.portalmedico.appsbrasil.gsk.com
cert00017-azurecdn.akamaized.net
login.gsk.com
incapsula.com
www.gsk.com
*.benlysta.com
incapsula.com
gsk.com
cert00041-azurecdn.akamaized.net
zovirax.se
cert00017-azurecdn.akamaized.net
*.gsk.com.au
*.tesarobio.fr
*.benlysta.com
cerpssapoer.gsk.com
servicenowqa.gsk.com
aquafresh.ca
us-gdc-vsed-read2.gsk.com
openapproval.gsk.com
www.livechat.gsk.com
cert00017-azurecdn.akamaized.net
rewrites.gskinternet.com
*.api.portalmedico.appsbrasil.gsk.com
*.softlaunch-cf65.gskinternet.com
us-gdc-vsed-read2.gsk.com
*.softlaunch-cf65.gskinternet.com
nucalaautoinjector.com
voltaren.fi
accounts-7802711.gsk.com
*.synflorix.kr
lwdev.gsk.com
stage-publish.niquitin.gsk.com
cert00041-azurecdn.akamaized.net
cert00076-azurecdn.akamaized.net
*.cookies.gsk.com
gskpro.com
cert00017-azurecdn.akamaized.net
cert00017-azurecdn.akamaized.net
us-gdc-vsed-read2.gsk.com
report2.gsk.com
cert00041-azurecdn.akamaized.net
softlaunch-iis.gskinternet.com
cert00041-azurecdn.akamaized.net
ce-jira.gsk.com
incapsula.com
*.casadevacinasgsk.com.br
accounts-7802831.gsk.com
*.gsk.com
gems8test.gsk.com
myconfluencedev.gsk.com
dobleaccion.com
theprotectors.sg
ecs.gsk.com
eagledev.gsk.com
rewrites.gskinternet.com
*.advair.com
*.softlaunch-cf65.gskinternet.com
softlaunch-jboss.gskinternet.com
cert00017-azurecdn.akamaized.net
esft.gsk.com
*.cf5.author.gsk.com
cert00017-azurecdn.akamaized.net
ace.gsk.com
softlaunch-iis.gskinternet.com
uscp.gsk.com
softlaunch-iis.gskinternet.com
cl-cmsadmin.gsk.com
*.chestair.es
pacloud-admin-devtest.gsk.com
019dAM1L40SE02.019d.mgd.msft.net
*.corpsecurity.gsk.com
openinnovation.gsk.com
incapsula.com
talkingabouttdap.com
incapsula.com
cert00041-azurecdn.akamaized.net

Certificate

The complete raw certificate details for sip.gsk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrAVruwgA2iH9Vo4TryY
d2VUAno1atlZSqXv3TuUyXMTENqK2w99WEhBs30Lxet+EzvD5YGEmaewPzbVnI6r
33LpkWIuNeBQXJNbHqN9jNUVOCKVA8a1gtHPwyBV5Nf9umDT+2xs1amI3TTnCo45
mb0uqkfNbibO/ZzQU7cB9wh5dYMI39DXe1MO7QDSQv4oTt5nG9FHPGU8jemeqidr
wMp6csUOP4wlTMtM28jdle91+Hp+WLqN7+EssHVmkNRlBL4+YXzGrX78fTvDM/Qw
Bk9SF+VOHuwJPF2S7vWqkK7kALASWJ/kxW+WxZCoXw3uztLcp4qhdEwueZlAgvjT
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276767998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-11 01:47:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-11 06:04:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlaxoSmithKline Services Unlimited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip.gsk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24577061765380511227188090657185993176518364752873973668833611134502102031183821328510748750233377329585062324793509546541336456116017630356602162504590608098400580723077019972864370296388406064584634404967502764262966338922324043267626651910547683166104417903306473376400441164669340251635921849112440999832718935109389645134413132646167116449274895310707529330741711272621558159748913396611527124227747341801659503814274039005174322961259018457279124595752966357382736776282347291905686302430241129084047480749142270359199629685853018548399048172938817573784884962728753967101871596655862957860507549795131384714037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maxinutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.gskbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gskbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.viivhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.viivhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.maxinutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.gsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.stiefel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stiefel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8991856ac0b0725fc7ebc7a45fbc9a14d5d409f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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